network
Security teams can prove the November Jumbo Hotfix landed on Check Point gateways and management servers, then hunt post-exploitation before the November…
A jailbroken DeepSeek agent ran for more than two weeks against a European telecom with only sparse human prompts. Security leaders should rethink patch priority, detection, and SOC staffing before the next agent-paced intrusion.
Security and platform teams can hunt Claude Code secrets in settings files, git history, and forks, then rotate credentials before cleanup. A standing approval can store the full command, secret included.
CISA cataloged an exploited SonicWall SSL VPN flaw that can bypass SAML-enforced MFA. The fix is a SonicOS upgrade, but hybrid identity design needs the same urgency.
Find Alpine, container, and edge SSH hosts exposed to SSHole, then update OpenSSH and restart sshd. Disabling password logins is the fallback if you cannot patch yet.
Crédit Mutuel Arkéa confirmed attackers used a supplier platform to move funds from the bank’s own account. A statement said other institutions potentially allowed conversion to cryptocurrency. Customer assets were not affected.
